Insights
Retrospective: CRISP Autumn Training – Boston 2025
At Verizon’s Boston offices, the CRISP Autumn Training ran over two days and featured two technical sessions led by Patrick Kelley and Jared Haviland…
Read moreThreat intelligence & analysis
Insights
Real-time updates on vulnerabilities, threat actor activity, and lessons from the field — curated by the team defending IT, OT, and critical infrastructure every day.
Insights
SaaS Integrations: When Convenience Becomes the Attack Surface
Google’s Threat Intelligence team recently published findings on data theft campaigns exploiting integrations between Salesforce, Drift, and Salesloft. The research highlights a growing challenge…
Read moreInsights
Critical Path Security Joins the Atlanta Falcons Associate Partner Program
At Critical Path Security, we’ve always believed that cybersecurity is about more than firewalls, alerts, and incident response—it’s about people, community, and resilience. Today,…
Read moreInsights
Countering Chinese State-Sponsored Cyber Activity: New Threat Intelligence for Defenders
Nation-state actors continue to sharpen their tools and broaden their reach. A newly released Joint Cybersecurity Advisory (CSA) from NSA, CISA, FBI, and allied…
Read moreInsights
Patrick Kelley to Speak at the 20th Annual API Cybersecurity Conference
Critical Path Security is proud to announce that our CEO, Patrick Kelley, has been selected to speak at the 20th Annual API Cybersecurity Conference…
Read moreInsights
Urgent Security Advisory: CVE-2025-20265 – Critical RCE Vulnerability (CVSS 10.0) in Cisco Secure FMC
Cisco has released a critical security update addressing an unauthenticated remote code execution (RCE) vulnerability—CVE-2025-20265—in its Secure Firewall Management Center (FMC) Software. With the…
Read moreInsights
Measuring Fatigue, CPTD, and Burnout in Cybersecurity: Insights from BSidesAugusta 2025
Understanding the Hidden Threat of Burnout In the high-stakes world of cybersecurity, professionals — particularly those in SOC teams and cyber operations — can…
Read moreInsights
Guarding the Gateway: Strengthening Cybersecurity Hygiene in CRM Platforms
CRM Security: The Overlooked Risk At Critical Path Security, we’re seeing the same dangerous pattern across industries: companies pour money into CRM platforms to…
Read moreInsights
Compliance with Emergency Directive 25-02: Essential Steps for Mitigating Microsoft Exchange Vulnerability
Introduction The Cybersecurity and Infrastructure Security Agency’s (CISA) Emergency Directive 25-02 has been issued to address a critical post-authentication vulnerability (CVE-2025-53786) affecting Microsoft Exchange…
Read moreLooking for a cyber security service provider?
Contact us today to find out how we can help you minimize risk and keep your business safe and compliant.