CSA publishes updated cybersecurity findings and guidance for registered firms