Real-time updates on vulnerabilities, threat actor activity, and lessons from the field — curated by the team defending IT, OT, and critical infrastructure every day.
The approval of NERC CIP-015-1 marks a major shift in how critical infrastructure operators must defend their environments. For years, compliance efforts focused on…
Read moreSummary: Global IT distributor Ingram Micro experienced a critical ransomware intrusion over the July 4 weekend, forcing it to take internal systems offline. The…
Read moreLast week, our founder Patrick Kelley had the privilege of presenting on a topic often overlooked in our industry: the mental health challenges facing…
Read morePhoto Courtesy of NASCAR Canada This past weekend, Ryan Vargas drove the Critical Path Security #28 Dodge Challenger to another podium finish, continuing to…
Read moreWe’re proud to announce that Patrick Kelley’s session at RSAC™ 2025, titled “Mental Health In Cybersecurity: Balancing the Scales ”, has officially been recognized as…
Read moreCritical Path Security is excited to announce that Patrick Kelley, our CEO and seasoned cybersecurity expert, will deliver specialized training on leveraging Zeek for…
Read moreSharePoint phishing has become one of the most effective tactics used by attackers to compromise user credentials—and it's working because it looks familiar. If…
Read moreJune 12, 2025 — Palo Alto Networks has released seven new security advisories detailing critical and medium-severity vulnerabilities affecting several of its core products,…
Read moreIvanti and Fortinet have released security updates to resolve over a dozen vulnerabilities across their platforms, including several rated high severity. Ivanti Vulnerabilities Ivanti…
Read moreContact us today to find out how we can help you minimize risk and keep your business safe and compliant.