Web app pentesting in 2026 isnβt just about SQLi & XSS anymore.
This OWASP Top 10βbased checklist breaks down A01βA10 into practical tests every security team should run.
π Use it before attackers do:
https://t.co/8N5LOyML9E
#OWASPTop10#pentest#Canada#CanadaCyberAwareness
π¨ Critical Alert: A new n8n vulnerability (CVE-2025-68668, CVSS 9.9) allows authenticated users to execute system commands via a sandbox bypass.
If you run n8n < 2.0.0, patch NOW.
π Full breakdown & mitigations below.
https://t.co/gT2GzyFo0B
#CyberSecurity#DevOps#RCE
Over 10,000 Fortinet firewalls are still exposed to a 5-year-old MFA bypass flaw (CVE-2020-12812)βand itβs actively exploited.
Legacy vulnerabilities never expire. Patch now:
https://t.co/xC17JY9FTW
#CyberSecurity#CVE202012812#Fortinet#Canada#CanadaCyberAwareness
#Apple confirms active exploitation of two #WebKit zero-days impacting iOS, macOS, Safari, and all iOS browsers.
Highly targeted attacks linked to advanced spyware activity.
Update all Apple devices immediately.
Read More:
https://t.co/JzQzWKNoFS
#ZeroDay#Canada
New critical threats: Sneeit #WordPress RCE is being mass exploited, while a flaw in ICTBroadcast is fueling a new precision-targeted Frost DDoS botnet.
Backdoors, admin hijacks, and automated exploitation are accelerating. Patch immediately.
#Cybersecurity#InfoSec#Canada
Record DDoS, Chrome zero-days, and React2Shell RCE made headlines! Get the quick breakdown of this week's major security threats.
π§ Listen: https://t.co/3RwX6YE60v
#CyberSecurity#InfoSec#DDoS#ZeroDay
Post
π¨ #React2Shell (CVE-2025-55182) is being actively exploited β over 2.15M Next.js & React Server Components services at risk.
Unauthenticated RCE.
CVSS 10.
State-sponsored exploitation confirmed.
https://t.co/ULWx4RZz72
#CyberSecurity#CVE202555182
π¨ New Android malware alert: #Albiriox is one of the most advanced ODF threats of 2025.
Targets 400+ banking & fintech apps.
Stay vigilant:
https://t.co/UB1qjHiMNR
#CyberSecurity#Canada#CanadaCyberAwareness
π¨ New #Metasploit module just weaponized two FortiWeb 0-days β CVE-2025-64446 & CVE-2025-58034.
Attackers can now go from no auth β full root RCE in seconds.
Read More:
https://t.co/DgOgJG3nAt
#CyberSecurity#Fortinet#Canada#CanadaCyberAwareness