Home PSEPC Daily Brief DOB05-223

Daily Brief

The PSEPC Daily Brief is a compilation of summaries of publicly available and PSEPC information concerning critical infrastructure protection and emergency management.

DOB05-223 - 22 November 2005

News

PSEPC releases Advisory AV05-036
On November 21, PSEPC released Advisory AV05-036 to bring attention to a recently disclosed vulnerability in Microsoft Internet Explorer (IE), which could be exploited to execute arbitrary code. PSEPC recommends that users of Microsoft IE do not respond to or click on links from unsolicited e-mail, and to disable Active Scripting in IE.
(Source: Public Safety and Emergency Preparedness Canada, 21 November 2005)
Click here for the source article

SANS releases annual Top 20 Internet security vulnerabilities
On November 22, the SANS (SysAdmin, Audit, Network, Security) Institute released their annual list of the top 20 Internet security vulnerabilities, the result of collaboration between SANS, leading IT security vendors, and government incident response teams, including the Canadian Cyber Incident Response Centre (CCIRC). Personnel responsible for system and network security are strongly urged to consult this list and ensure that any of the vulnerabilities that apply to their environment are patched.
(Source: SANS, 22 November 2005)
Click here for source article

For more information on CCIRC's participation in the SANS Top 20, click here.

Thousands of birds to be culled in B.C.
Further to PSEPC Daily Brief DOB05-222, media reports that more than 67,000 ducks and geese are to be culled in B.C. after a bird at a Chilliwack farm was tested positive for avian flu. Although Canadian Food Inspection Agency (CFIA) officials say that the virus was a low-pathogenic variant, they have ordered the depopulation and are keeping all farms within five kilometres of where the infected bird was found under observation.
(Source: GLOBEANDMAIL.COM, 21 November 2005)
Click here for the source article (free subscription required)

For the latest information from the CFIA, click here.

Bird flu sparks potential bans on B.C. poultry
As of November 21, there are media reports that the U.S. government intends to restrict the import of poultry from mainland B. C. depending on the pathogenicity of the virus. This move comes after a case of avian flu was found on a farm in Chilliwak, B.C. According to the media, Taiwan and Japan intend to follow the U.S. with similar action, and Hong Kong has placed an import ban on poultry from B.C.
(Sources: canada.com, 21 November 2005; GLOBEANDMAIL.COM, 22 November 2005)
Click here for the source article
Click here for the source article (free subscription required)

Government of Canada invests in technologies for airport passenger bridges
On November 21, the Honourable Albina Guarnieri, Minister of Veterans Affairs and Member of Parliament for Mississauga East-Cooksville, announced on behalf of the Minister of Industry, a $1.8-million investment towards research and development of new technologies for airport passenger bridges. This is expected to result in safer operations and facilitate faster boarding and deplaning. The initiative is part of a $6.1-million project by Indal Technologies Incorporated of Mississauga, Ontario.
(Source: Industry Canada, 21 November 2005)
Click here for the source article

Cyber risk assessment

Over the course of the past 24 hours, the Canadian Cyber Incident Response Centre (CCIRC) received detailed information regarding a newly discovered vulnerability on Microsoft’s Internet Explorer. Advisory AV05-036 was released with the necessary steps to minimize any possible threat. No significant incidents with the potential to affect critical infrastructure have been reported. Accordingly, based on the information available to CCIRC, the cyber risk facing Canadian critical infrastructure is assessed as low. Personnel responsible for information, systems and network security should continue to apply appropriate security precautions and monitor their systems.

Recent cyber alerts and advisories issued by CCIRC can be viewed under “Recent analytical releases” at www.psepc.gc.ca/ccirc.

The SANS Institute has released their annual list of the top 20 security vulnerabilities, the result of collaboration between SANS, leading IT security vendors, and government incident response teams (including CCIRC). Personnel responsible for system and network security are strongly urged to consult this list and ensure that any of the vulnerabilities that apply to their environment are patched. To view the list, including detailed information on obtaining and applying patches or establishing work-arounds, click here. For more information on CCIRC's participation in the SANS Top 20, click here.

See also...

• The Weather Office
• FAC - Travel Updates

Note to readers

Public Safety and Emergency Preparedness Canada (PSEPC) collects information related to cyber and physical threats to, and incidents involving, Canadian critical infrastructure. This allows us to monitor and analyze threats and to issue alerts, advisories and other information products. To report threats or incidents, please contact the Government Operations Centre (GOC) at (613) 991-7000 or goc-cog@psepc-sppcc.gc.ca by e-mail.

Unauthorized use of computer systems and mischief in relation to data are serious Criminal Code offences in Canada. Any suspected criminal activity should be reported to local law enforcement organizations. The Royal Canadian Mounted Police (RCMP) National Operations Centre (N.O.C.) provides a 24/7 service to receive such reports or to redirect callers to local law enforcement organizations. The N.O.C. can be reached at (613) 993-4460. National security concerns should be reported to the Canadian Security Intelligence Service (CSIS) at (613) 993-9620.

Links to sites not under the control of the Government of Canada (GoC) are provided solely for the convenience of users. The GoC is not responsible for the accuracy, currency or the reliability of the content. The GoC does not offer any guarantee in that regard and is not responsible for the information found through these links, nor does it endorse the sites and their content.

Users should be aware that information offered by non-GoC sites not subject to the Official Languages Act, and to which the PSEPC Daily Brief links, might be available only in the language(s) used by the sites in question.