Real-time updates on vulnerabilities, threat actor activity, and lessons from the field — curated by the team defending IT, OT, and critical infrastructure every day.
InsightsPHP Discloses Another Remote Code Execution Vulnerability Following Emergency PHP2Shell Patches October 23, 2026 Just two days after releasing emergency security updates for two…
Read more
UncategorizedPHP2Shell: Critical PHP Vulnerabilities Require Immediate Patching Two critical remote code execution vulnerabilities affecting PHP-based infrastructure have prompted emergency security updates. Organizations should assess…
Read more
InsightsWhen Legitimate Commands Become Cyber Threats: Lessons From France's Supermarket Refrigeration Attacks Hundreds of supermarkets across France recently experienced a major disruption of their…
Read more
UncategorizedSeptember 2026 Threat Brief: When the Trusted Tool Becomes the Attack Path September’s cybersecurity developments did not point to one dominant vulnerability, threat actor,…
Read moreAugust 2026 Threat Brief August’s cyber activity reinforced something security teams have been seeing for some time: the impact of an attack increasingly extends…
Read moreJuly 2026 Threat Brief: When Cyber Incidents Become Operational Incidents For several organizations in July, a cyber incident did not stay behind a screen.…
Read moreRick Hudson, CTO at Critical Path Security, speaks at Blue Team Con in Chicago this September on Strength in Diversity: Building an Inclusive Cybersecurity…
Read moreCritical Path Security is continuing in the Atlanta Falcons Associate Partner Program for the 2026 season.
Read moreMost of the behavior behind attacks on water systems can be detected without a single attacker IP or malware signature. Here is how Zeek…
Read moreContact us today to find out how we can help you minimize risk and keep your business safe and compliant.