Real-time updates on vulnerabilities, threat actor activity, and lessons from the field — curated by the team defending IT, OT, and critical infrastructure every day.
A newly disclosed breach has shaken the cybersecurity landscape: hackers have leaked a massive dataset containing over 86 million AT&T customer records, including decrypted…
Read moreWe're pleased to share that Patrick Kelley, CEO of Critical Path Security and Léargas Security, will be speaking at the 2025 GTBA Annual Meeting…
Read moreWe're proud to announce that Patrick Kelley, CEO of Critical Path Security and Léargas Security, will be speaking once again at GridSecCon 2025. His…
Read moreDiscovery Highlights Common Data Handling Gaps In May 2025, cybersecurity researcher Jeremiah Fowler identified an unsecured ElasticSearch database that had been left publicly accessible.…
Read moreMost industrial networks aren’t taken down by ransomware. They fall because no one’s watching the protocols that matter—the ENIP chatter between PLCs, the CIP…
Read moreExecutive Summary On May 29, 2025, ConnectWise publicly disclosed a cybersecurity breach targeting its ScreenConnect remote access platform. The attack, attributed to a sophisticated…
Read moreCollecting logs isn’t security. And having a tool doesn’t mean you’re protected. What matters is what you do with that information—and how fast you…
Read morehttps://www.criticalpathsecurity.com/wp-content/uploads/2025/05/Ryan.Vargas.Meeting.mp4 In our latest interview with Ryan Vargas, we got a firsthand look at what’s fuelling his drive this season—upcoming races, continued team growth,…
Read moreOn May 21, 2025, CISA and international cybersecurity authorities issued CSA AA25-141A, attributing a sophisticated espionage campaign to GRU Unit 26165 (APT28/Fancy Bear). These…
Read moreContact us today to find out how we can help you minimize risk and keep your business safe and compliant.