Alberta voter data leaked as separatists file signatures for independence vote Authorities investigate leak of 2.9 million voters’ details, adding to turmoil over push for independence referendum Alberta separatists have delivered more than 300,000 signatures to elections officials in western Canada , in support of their attempt to force an independence referendum in Canada’s oil-rich province. But the effort stumbled immediately as a separatist-linked group posted the personal data of nearly 3 million residents online in one of the largest data breaches in Canadian history, fomenting fears of a possible political interference crisis. Continue reading...
Original (en)
Authorities investigate leak of 2.9 million voters’ details, adding to turmoil over push for independence referendum Alberta separatists have delivered more than 300,000 signatures to elections officials in western Canada , in support of their attempt to force an independence referendum in Canada’s oil-rich province. But the effort stumbled immediately as a separatist-linked group posted the personal data of nearly 3 million residents online in one of the largest data breaches in Canadian history, fomenting fears of a possible political interference crisis. Continue reading...
Entities Detected
· click + to trackGoogle Threat Intelligence reports a sophisticated supply chain attack on axios NPM package versions 1.14.1 and 0.30.4 (March 31, 2026), where attackers injected malicious 'plain-crypto-js' dependency to deploy WAVESHAPER.V2 backdoor across Windows, macOS, and Linux platforms. Attribution to UNC1069 based on malware signatures, infrastructure overlaps, and operational patterns. Remediation guidance includes version pinning, dependency auditing, CI/CD pipeline security, and credential rotation.
A critical remote code execution vulnerability (CVE-2026-1731) has been identified in remote monitoring and management software that could be exploited to deploy ransomware and compromise supply chain integrity. The flaw enables attackers to execute arbitrary code, creating significant risk for downstream organizations and critical infrastructure.
Bitwarden CLI, the command-line interface for the password manager Bitwarden, has been compromised as part of a newly discovered Checkmarx supply chain campaign. The affected package version is @bitwarden/cli@2026.4.0, with malicious code published in 'bw1.js,' according to findings from JFrog and Socket.
fa8418c1…openwatch.io →