The Investment Industry Regulatory Organization of Canada (IIROC) is urging firms that use remote access services to be vigilant amid “evolving cybersecurity threats.”

On Thursday, IIROC issued a notice saying that remote access vendors have advised of “potential vulnerabilities” in their systems that could be exploited to gain access to the internal networks of investment firms.

IIROC “strongly recommended” that firms’ IT departments patch all systems, monitor their network environments, implement multi-factor authentication, and install anti-virus and anti-malware programs.

For additional information, see IIROC’s notice.