OSC A.I CyberSecurity Scoring
03/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Ontario Science Centre in 2026.
No incidents recorded for Ontario Science Centre in 2026.
No incidents recorded for Ontario Science Centre in 2026.
Museums, Historical Sites, and Zoos
Latest updates, reports, and threat intel affecting the global network.
Curiosity comes to life this March Break! Join the Ontario Science Centre from Saturday, March 14 to Sunday, March 22 for special...
A data and cybersecurity monitoring/training centre will be coming to Sault Ste. Marie – and with it, a minimum of 200 jobs.
When a digital disaster strikes, organizations want someone who understands what happened and someone who can clearly articulate the road to...
Ontario Science Centre partners with Deerhurst Resort to bring skygazing tips and helpful resources, expert astronomy analysis and dazzling...
Get ready for a summer of curiosity-sparking fun at Ontario Science Centre Experiences! Along with two dynamic new exhibitions —Survival:...
Ontario Tech University's cybersecurity research expertise is in the spotlight after the National Cybersecurity Consortium's (NCC)...
Ottawa, Ontario – October 30, 2024. The Canadian Centre for Cyber Security (Cyber Centre) has released its National Cyber Threat Assessment...
Much of his focus is on cybersecurity.
The Ontario government is providing new student supports and updating curriculum for the 2023-24 school year.
Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePeerNotify that allows unauthenticated attackers to grow process memory without limit. Attackers can repeatedly send notify frames up to 1 MB to the handshake RPC port, filling the uncapped notifys vector until the out-of-memory killer terminates the engine.
Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated remote attackers to block the handshake daemon by never reading replies. Attackers can send a Metadata request to the handshake RPC port and stall SocketHandShakePlugin's single listener thread in writeFully(), breaking all subsequent handshakes, metadata fetches, notify and probe requests.
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences. Attackers can steer an AI agent via prompt injection to abuse save_presentation, open_presentation, or manage_image output_path to overwrite any server-writable file or load external files.
A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connection, causing the server to hand that connection to a second worker thread before the first worker's result is flushed. The second worker blocks until nsslapd-ioblocktimeout while holding the connection mutex, preventing delivery of the completed operation's result. Repeating this across a small number of connections proportional to the configured worker-thread pool size exhausts the entire pool under default configuration, denying service to all clients (anonymous and authenticated, plaintext and TLS) for as long as the attacker maintains the connections.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPEC-63: before 3.0b63.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.