Canada's Cyber Crisis: 17 Billion Threats and the AI Arms Race Fuelling Them

Cyber threats targeting Canadians have escalated sharply, and the numbers back it up. Fortinet's FortiGuard Labs recorded a 379% increase in worldwide ransomware activity, with over 370 Canadian organizations hit by extortion attacks in a recent reporting period. Derek Manky explains this isn't random noise — attackers are increasingly focused, targeted, and efficient, operating on a "work smarter, not harder" model powered by AI. At the core of the problem is the rise of Crime-as-a-Service (CaaS). Dark web platforms now offer turnkey AI-powered attack tools — including weaponized GPT models — for as little as $1,000 per year. These tools scrape social media profiles, craft hyper-personalized phishing emails in French or English, and can automate the entire attack cycle, including selling compromised network access through what Fortinet calls "shadow agents." The attack window has shrunk from weeks to 24–48 hours — and is expected to drop below 24 hours within the year. On the defence side, 47% of Canadian organizations cite a cybersecurity skills shortage as a top challenge, and nearly half report difficulty finding staff with AI-specific expertise. Manky argues that throwing headcount at the problem isn't the answer — organizations need AI-powered Security Operations Centers (SOCs), and the talent trained to work inside them. Fortinet has partnered with 37 Canadian academic institutions, including BCIT and Simon Fraser University, to build that pipeline. Looking ahead, Manky flags deepfake-based identity attacks, AI agent exploitation, and insider threats — including "laptop farmers" infiltrating organizations remotely — as emerging risks. On the countermeasures side, Fortinet recently launched a cybercrime bounty program in partnership with Crime Stoppers International, enabling organizations and individuals to submit tips and contribute to law enforcement action. Relevant Links Fortinet Security Blog: https://www.fortinet.com/blog Fortinet Training Institute / NSE Certification: https://training.fortinet.com Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.