This advisory details steps organizations can take to defend against attacks originating from large, dynamic networks of compromised devices, based on guidance from the…
Read moreCritical Security Bulletin Fortinet FortiClient EMS – Unauthenticated Remote Code Execution (CVE-2026-35616)Advisory: Fortinet PSIRT FG-IR-26-099Published: April 4, 2026Severity: Critical (CVSS 9.1–9.8)Status: Active exploitation observed…
Read moreSecurity Bulletin CVE-2026-32987 – OpenClaw Bootstrap Code Replay Leading to Administrative Access Overview CVE-2026-32987 is a critical vulnerability affecting OpenClaw that allows an unauthenticated…
Read moreMarch 2026 Cyber activity in March reflects a continued shift toward more visible, coordinated, and operationally impactful threats. What stands out is not just…
Read moreExecutive Summary The termination of the VMware Cloud Service Provider (VCSP) program represents a significant shift in how organizations access and operate VMware-based infrastructure.…
Read moreExecutive Summary CVE-2026-21643 is a critical SQL injection vulnerability affecting FortiClient Endpoint Management Server. The vulnerability has progressed rapidly from disclosure to active exploitation,…
Read moreCritical IP-KVM Vulnerabilities Enable Full Remote System Takeover Executive Summary A newly disclosed set of nine critical vulnerabilities impacting IP-KVM (Keyboard, Video, Mouse over…
Read moreDate: March 19, 2026Severity: HighAffected Product: ConnectWise ScreenConnect (versions prior to 26.1) Executive Summary Critical Path Security is advising clients of a recently disclosed…
Read moreSecurity Bulletin Cisco Firewall Zero-Day Exploitation in Ransomware Campaigns Date: March 2026Severity: CriticalThreat Type: Initial Access / Infrastructure Compromise Executive Summary A recently disclosed…
Read moreContact us today to find out how we can help you minimize risk and keep your business safe and compliant.