Discovery Highlights Common Data Handling Gaps In May 2025, cybersecurity researcher Jeremiah Fowler identified an unsecured ElasticSearch database that had been left publicly accessible.…
Read moreMost industrial networks aren’t taken down by ransomware. They fall because no one’s watching the protocols that matter—the ENIP chatter between PLCs, the CIP…
Read moreExecutive Summary On May 29, 2025, ConnectWise publicly disclosed a cybersecurity breach targeting its ScreenConnect remote access platform. The attack, attributed to a sophisticated…
Read moreCollecting logs isn’t security. And having a tool doesn’t mean you’re protected. What matters is what you do with that information—and how fast you…
Read morehttps://www.criticalpathsecurity.com/wp-content/uploads/2025/05/Ryan.Vargas.Meeting.mp4 In our latest interview with Ryan Vargas, we got a firsthand look at what’s fuelling his drive this season—upcoming races, continued team growth,…
Read moreOn May 21, 2025, CISA and international cybersecurity authorities issued CSA AA25-141A, attributing a sophisticated espionage campaign to GRU Unit 26165 (APT28/Fancy Bear). These…
Read moreModern software is built on open-source. Developers rely on public repositories like npm, PyPI, and Maven Central to move fast, avoid reinventing the wheel,…
Read moreAs the 2025 NASCAR Canada Series kicks off in full force, Critical Path Security is proud to support driver Ryan Vargas in his return…
Read moreThis week, Patrick Kelley, CEO of both Léargas Security and Critical Path Security, will be attending Consensus 2025 in Toronto, Ontario. While the companies…
Read moreContact us today to find out how we can help you minimize risk and keep your business safe and compliant.