PIC A.I CyberSecurity Scoring
17/03/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for Plan International Canada in 2026.
No incidents recorded for Plan International Canada in 2026.
No incidents recorded for Plan International Canada in 2026.
Fundraising
Latest updates, reports, and threat intel affecting the global network.
What's the top security software to keep your PC safe? We've tested, reviewed, and rated more than 40 apps to help you choose the right...
Government of Canada's official one-stop-shop for comprehensive international travel information.
Today, we are announcing the most important commitment in Microsoft Canada's history. We're adding to our investments – with a total of $19...
Hacker's Movie Guide” with Foreword by Steve Wozniak, co-founder of Apple.
Tuesday's federal budget offers a glimpse into how dozens of government departments plan to rein in spending following this summer's...
This week in cybersecurity from the editors at Cybercrime Magazine.
A catastrophic cyberattack at Jaguar Land Rover is forcing governments and industrial leaders to address urgent demands for business...
Prepare to switch to offline systems in the event of a cyber-attack, firms are being advised.
October 13, 2025 – New Delhi, India - Global Affairs Canada. Today, Honourable Anita Anand, Minister of Foreign Affairs, and India's Minister of External...
ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, including students, to modify lessons. Authenticated students can supply arbitrary lesson ids to change titles and stored HTML content or delete lessons in their course and in other courses and organizations.
ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes that allows course tutors or admins to modify submissions in other courses. Attackers can supply their own course id with another course's submission UUID to PUT or DELETE handlers to overwrite answers, grades, feedback, and grading status or delete submissions.
BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the key from shipped configuration constants. Attackers can submit forged tokens to /api/unsubscribe, /api/unsubscribe_new, or /api/subscribe/confirm to deactivate any contact or force confirmed subscriptions.
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrary user ids. Attackers holding sys:user:* permissions can call /admin/sys/user/info, update, or delete to read records, reset passwords and roles, or delete accounts.
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitrary role ids. Attackers holding ordinary sys:role permissions can call /admin/sys/role/info, update, or delete with another admin's role id to rewrite menu and department grants, changing other users' effective access.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.