The European Union has officially adopted the Cyber Blueprint, a new framework to coordinate cybersecurity crisis response across Member States. This move comes amid growing concern over ransomware, supply chain attacks, and threats to critical infrastructure, all of which demand fast, collective action at both national and international levels. What is the Cyber Blueprint? The Cyber…
The Communications Security Establishment (CSE) has released its 2025 update on cyber threats to Canada’s democratic process, highlighting the increasing use of artificial intelligence (AI) by hostile actors to interfere with elections and democratic institutions. Key Findings: Implications for Canada: While the report assesses that it is very unlikely (10–30% chance) that AI-enabled cyber activities…
What Is AIDA? The Artificial Intelligence and Data Act (AIDA) is Canada’s first national framework aimed at regulating the design, development, and deployment of high-impact AI systems — technologies that could influence human rights, safety, economic opportunity, and public trust. Introduced in Bill C-27 (the Digital Charter Implementation Act, 2022), AIDA marks a pivotal moment in Canadian tech policy. It aims…
The Canadian Centre for Cyber Security partnered with the UK’s National Cyber Security Centre (NCSC-UK) and the Department for Science, Innovation and Technology (DSIT) to release a joint Software Security Code of Practice and supporting guidance for software vendors. This initiative addresses growing concerns around software supply chain attacks and vulnerabilities caused by weak development or maintenance…
The Cyber Resilience Act (CRA) is a new EU regulation aimed at improving the cybersecurity of products that include digital elements—from everyday smart devices like baby monitors and smartwatches to more complex connected systems. These products are becoming increasingly common, yet many users remain unaware of the security risks they can pose. The CRA ensures that manufacturers and…
The Communications Security Establishment (CSE) has published its 2025 update on cyber threats to Canada’s democratic system, revealing that foreign actors are increasingly using artificial intelligence (AI) to disrupt elections around the world—including in Canada. The report, titled Cyber Threats to Canada’s Democratic Process: 2025 Update, outlines how the growing accessibility and power of AI tools…
The Canadian Centre for Cyber Security (Cyber Centre), alongside the U.S. National Security Agency (NSA) and international partners, has released new cybersecurity guidance addressing content credentials and the integrity of multimedia in the era of generative artificial intelligence (AI). This collaboration includes: With the rise of AI-generated content, threat actors can easily manipulate media, making it harder to distinguish between authentic and altered content….
The European Commission and the European Board for Digital Services have officially endorsed the integration of the voluntary Code of Practice on Disinformation into the Digital Services Act (DSA) framework. This move establishes the Code as a key benchmark for assessing platform compliance with the DSA. In January 2025, signatories of the Code—including Very Large Online Platforms and Search Engines (VLOPs & VLOSEs) such as Google, Meta, Microsoft, and…
The Canadian Centre for Cyber Security (Cyber Centre) has updated its Security Review Program (SRP), now called the Telecoms Cyber Resilience Program (TCRP). This expanded initiative aims to support Canadian mobile network operators in building secure and resilient 3G, 4G, and 5G networks. By sharing threat intelligence and mitigation strategies, the program addresses current and emerging…
